# Vulnerabilities published in 2023


- [CVE-2023-20221](https://insights.sbomify.com/CVE-2023-20221/): Cross-site request forgery in Cisco IP Phones with Multiplatform Firmware (medium 6.5)
- [CVE-2023-20220](https://insights.sbomify.com/CVE-2023-20220/): Command injection in Cisco Firepower Management Center (high 7.2)
- [CVE-2023-2022](https://insights.sbomify.com/CVE-2023-2022/): Missing Authorization in GitLab (medium 4.3)
- [CVE-2023-20219](https://insights.sbomify.com/CVE-2023-20219/): Command injection in Cisco Firepower Management Center (high 7.2)
- [CVE-2023-20218](https://insights.sbomify.com/CVE-2023-20218/): Cross-site scripting in Cisco Small Business IP Phones (medium 5.8)
- [CVE-2023-20217](https://insights.sbomify.com/CVE-2023-20217/): Privilege escalation in Cisco ThousandEyes Recorder Application (medium 5.5)
- [CVE-2023-20216](https://insights.sbomify.com/CVE-2023-20216/): Privilege escalation in Cisco BroadWorks (medium 4.4)
- [CVE-2023-20215](https://insights.sbomify.com/CVE-2023-20215/): Security feature bypass in Cisco Secure Web Appliance (medium 5.8)
- [CVE-2023-20214](https://insights.sbomify.com/CVE-2023-20214/): Auth bypass in Cisco SD-WAN vManage (critical 9.1)
- [CVE-2023-20213](https://insights.sbomify.com/CVE-2023-20213/): Memory corruption in Cisco Identity Services Engine Software (medium 4.3)
- [CVE-2023-20212](https://insights.sbomify.com/CVE-2023-20212/): Denial of service in Cisco Secure Endpoint (high 7.5)
- [CVE-2023-20211](https://insights.sbomify.com/CVE-2023-20211/): SQL injection in Cisco Unified Communications Manager (high 8.1)
- [CVE-2023-20210](https://insights.sbomify.com/CVE-2023-20210/): Privilege escalation in Cisco BroadWorks (medium 6.0)
- [CVE-2023-2021](https://insights.sbomify.com/CVE-2023-2021/): Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass (medium 5.8)
- [CVE-2023-20209](https://insights.sbomify.com/CVE-2023-20209/): Command injection in Cisco TelePresence Video Communication Server (VCS) Expressway (medium 6.5)
- [CVE-2023-20208](https://insights.sbomify.com/CVE-2023-20208/): Cross-site scripting in Cisco Identity Services Engine Software (medium 4.8)
- [CVE-2023-20207](https://insights.sbomify.com/CVE-2023-20207/): Information disclosure in Cisco Duo Authentication Proxy (medium 4.9)
- [CVE-2023-20206](https://insights.sbomify.com/CVE-2023-20206/): Cross-site scripting in Cisco Firepower Management Center (medium 6.1)
- [CVE-2023-20205](https://insights.sbomify.com/CVE-2023-20205/): Cross-site scripting in Cisco Evolved Programmable Network Manager (EPNM) (medium 5.4)
- [CVE-2023-20204](https://insights.sbomify.com/CVE-2023-20204/): Cross-site scripting in Cisco BroadWorks (medium 5.4)
- [CVE-2023-20203](https://insights.sbomify.com/CVE-2023-20203/): Cross-site scripting in Cisco Evolved Programmable Network Manager (EPNM) (medium 5.4)
- [CVE-2023-20202](https://insights.sbomify.com/CVE-2023-20202/): Denial of service in Cisco IOS XE Software (medium 6.1)
- [CVE-2023-20201](https://insights.sbomify.com/CVE-2023-20201/): Cross-site scripting in Cisco Evolved Programmable Network Manager (EPNM) (medium 4.8)
- [CVE-2023-20200](https://insights.sbomify.com/CVE-2023-20200/): Denial of service in Cisco Firepower Extensible Operating System (FXOS) (high 7.7)
- [CVE-2023-2020](https://insights.sbomify.com/CVE-2023-2020/): Unauthorized scheduling of downtimes via REST API (medium 4.3)
- [CVE-2023-20199](https://insights.sbomify.com/CVE-2023-20199/): Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability (medium 6.2)
- [CVE-2023-20198](https://insights.sbomify.com/CVE-2023-20198/): Cisco IOS XE Web UI Privilege Escalation (critical 10.0, exploited in the wild)
- [CVE-2023-20197](https://insights.sbomify.com/CVE-2023-20197/): Denial of service in Cisco Secure Endpoint (high 7.5)
- [CVE-2023-20196](https://insights.sbomify.com/CVE-2023-20196/): File upload in Cisco Identity Services Engine Software (medium 4.7)
- [CVE-2023-20195](https://insights.sbomify.com/CVE-2023-20195/): File upload in Cisco Identity Services Engine Software (medium 4.7)
- [CVE-2023-20194](https://insights.sbomify.com/CVE-2023-20194/): Privilege escalation in Cisco Identity Services Engine Software (medium 4.9)
- [CVE-2023-20193](https://insights.sbomify.com/CVE-2023-20193/): Privilege escalation in Cisco Identity Services Engine Software (medium 6.0)
- [CVE-2023-20192](https://insights.sbomify.com/CVE-2023-20192/): Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities (critical 9.6)
- [CVE-2023-20191](https://insights.sbomify.com/CVE-2023-20191/): Security feature bypass in Cisco IOS XR Software (medium 5.8)
- [CVE-2023-20190](https://insights.sbomify.com/CVE-2023-20190/): Security feature bypass in Cisco IOS XR Software (medium 5.8)
- [CVE-2023-2019](https://insights.sbomify.com/CVE-2023-2019/): Denial of service in Linux kernel's netdevsim device driver (medium 4.4)
- [CVE-2023-20189](https://insights.sbomify.com/CVE-2023-20189/): Cisco Small Business Series Switches Buffer Overflow Vulnerabilities (high 8.6)
- [CVE-2023-20188](https://insights.sbomify.com/CVE-2023-20188/): Cross-site scripting in Cisco Small Business Smart and Managed Switches (medium 4.8)
- [CVE-2023-20187](https://insights.sbomify.com/CVE-2023-20187/): Denial of service in Cisco IOS XE Software (high 8.6)
- [CVE-2023-20186](https://insights.sbomify.com/CVE-2023-20186/): Missing authorization in Cisco IOS XE Software (high 8.0)
- [CVE-2023-20185](https://insights.sbomify.com/CVE-2023-20185/): Weak cryptography in Cisco NX-OS System Software in ACI Mode (high 7.4)
- [CVE-2023-20184](https://insights.sbomify.com/CVE-2023-20184/): Cisco DNA Center Software API Vulnerabilities (medium 5.4)
- [CVE-2023-20183](https://insights.sbomify.com/CVE-2023-20183/): Cisco DNA Center Software API Vulnerabilities (medium 5.4)
- [CVE-2023-20182](https://insights.sbomify.com/CVE-2023-20182/): Cisco DNA Center Software API Vulnerabilities (medium 5.4)
- [CVE-2023-20181](https://insights.sbomify.com/CVE-2023-20181/): Cross-site scripting in Cisco Small Business IP Phones (medium 6.1)
- [CVE-2023-20180](https://insights.sbomify.com/CVE-2023-20180/): Cross-site request forgery in Cisco Webex Meetings (medium 4.3)
- [CVE-2023-20179](https://insights.sbomify.com/CVE-2023-20179/): Cross-site scripting in Cisco SD-WAN vManage (medium 4.3)
- [CVE-2023-20178](https://insights.sbomify.com/CVE-2023-20178/): Privilege escalation in Cisco Secure Client (high 7.8)
- [CVE-2023-20177](https://insights.sbomify.com/CVE-2023-20177/): Denial of service in Cisco Firepower Threat Defense Software (medium 4.0)
- [CVE-2023-20176](https://insights.sbomify.com/CVE-2023-20176/): Denial of service in Cisco Aironet Access Point Software (medium 5.8)
- [CVE-2023-20175](https://insights.sbomify.com/CVE-2023-20175/): Command injection in Cisco Identity Services Engine Software (high 8.8)
- [CVE-2023-20174](https://insights.sbomify.com/CVE-2023-20174/): Cisco Identity Services Engine XML External Entity Injection Vulnerabilities (medium 4.9)
- [CVE-2023-20173](https://insights.sbomify.com/CVE-2023-20173/): Cisco Identity Services Engine XML External Entity Injection Vulnerabilities (medium 4.9)
- [CVE-2023-20172](https://insights.sbomify.com/CVE-2023-20172/): Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities (medium 5.4)
- [CVE-2023-20171](https://insights.sbomify.com/CVE-2023-20171/): Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities (medium 5.4)
- [CVE-2023-20170](https://insights.sbomify.com/CVE-2023-20170/): Command injection in Cisco Identity Services Engine Software (medium 6.0)
- [CVE-2023-2017](https://insights.sbomify.com/CVE-2023-2017/): Improper Control of Generation of Code in Twig Rendered Views in Shopware (high 8.8)
- [CVE-2023-20169](https://insights.sbomify.com/CVE-2023-20169/): Denial of service in Cisco NX-OS Software (high 7.4)
- [CVE-2023-20168](https://insights.sbomify.com/CVE-2023-20168/): Denial of service in Cisco NX-OS Software (high 7.1)
- [CVE-2023-20167](https://insights.sbomify.com/CVE-2023-20167/): Cisco Identity Services Engine Path Traversal Vulnerabilities (medium 6.0)
- [CVE-2023-20166](https://insights.sbomify.com/CVE-2023-20166/): Cisco Identity Services Engine Path Traversal Vulnerabilities (medium 6.0)
- [CVE-2023-20164](https://insights.sbomify.com/CVE-2023-20164/): Cisco Identity Services Engine Command Injection Vulnerabilities (medium 6.5)
- [CVE-2023-20163](https://insights.sbomify.com/CVE-2023-20163/): Cisco Identity Services Engine Command Injection Vulnerabilities (medium 6.5)
- [CVE-2023-20162](https://insights.sbomify.com/CVE-2023-20162/): Cisco Small Business Series Switches Buffer Overflow Vulnerabilities (high 8.6)
- [CVE-2023-20161](https://insights.sbomify.com/CVE-2023-20161/): Cisco Small Business Series Switches Buffer Overflow Vulnerabilities (high 8.6)
- [CVE-2023-20160](https://insights.sbomify.com/CVE-2023-20160/): Cisco Small Business Series Switches Buffer Overflow Vulnerabilities (high 8.6)
- [CVE-2023-20159](https://insights.sbomify.com/CVE-2023-20159/): Cisco Small Business Series Switches Buffer Overflow Vulnerabilities (high 8.6)
- [CVE-2023-20158](https://insights.sbomify.com/CVE-2023-20158/): Cisco Small Business Series Switches Buffer Overflow Vulnerabilities (high 8.6)
- [CVE-2023-20157](https://insights.sbomify.com/CVE-2023-20157/): Cisco Small Business Series Switches Buffer Overflow Vulnerabilities (high 8.6)
- [CVE-2023-20156](https://insights.sbomify.com/CVE-2023-20156/): Cisco Small Business Series Switches Buffer Overflow Vulnerabilities (high 8.6)
- [CVE-2023-20155](https://insights.sbomify.com/CVE-2023-20155/): Denial of service in Cisco Firepower Management Center (high 7.5)
- [CVE-2023-20154](https://insights.sbomify.com/CVE-2023-20154/): Cisco Modeling Labs External Authentication Bypass Vulnerability (critical 9.1)
- [CVE-2023-20153](https://insights.sbomify.com/CVE-2023-20153/): Cisco Identity Services Engine Command Injection Vulnerabilities (medium 6.0)
- [CVE-2023-20152](https://insights.sbomify.com/CVE-2023-20152/): Cisco Identity Services Engine Command Injection Vulnerabilities (medium 6.0)
- [CVE-2023-20151](https://insights.sbomify.com/CVE-2023-20151/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20150](https://insights.sbomify.com/CVE-2023-20150/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-2015](https://insights.sbomify.com/CVE-2023-2015/): Cross-site scripting in GitLab (medium 4.4)
- [CVE-2023-20149](https://insights.sbomify.com/CVE-2023-20149/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20148](https://insights.sbomify.com/CVE-2023-20148/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20147](https://insights.sbomify.com/CVE-2023-20147/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20146](https://insights.sbomify.com/CVE-2023-20146/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20145](https://insights.sbomify.com/CVE-2023-20145/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20144](https://insights.sbomify.com/CVE-2023-20144/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20143](https://insights.sbomify.com/CVE-2023-20143/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20142](https://insights.sbomify.com/CVE-2023-20142/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20141](https://insights.sbomify.com/CVE-2023-20141/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20140](https://insights.sbomify.com/CVE-2023-20140/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-2014](https://insights.sbomify.com/CVE-2023-2014/): Cross-site Scripting (XSS) - Generic in microweber/microweber (medium 5.3)
- [CVE-2023-20139](https://insights.sbomify.com/CVE-2023-20139/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20138](https://insights.sbomify.com/CVE-2023-20138/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20137](https://insights.sbomify.com/CVE-2023-20137/): Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2023-20136](https://insights.sbomify.com/CVE-2023-20136/): Privilege escalation in Cisco Secure Workload (medium 4.3)
- [CVE-2023-20135](https://insights.sbomify.com/CVE-2023-20135/): Race condition in Cisco IOS XR Software (medium 5.7)
- [CVE-2023-20134](https://insights.sbomify.com/CVE-2023-20134/): Cisco Webex Meetings Web UI Vulnerabilities (medium 5.4)
- [CVE-2023-20133](https://insights.sbomify.com/CVE-2023-20133/): Cross-site scripting in Cisco Webex Meetings (medium 5.4)
- [CVE-2023-20132](https://insights.sbomify.com/CVE-2023-20132/): Cisco Webex Meetings Web UI Vulnerabilities (medium 5.4)
- [CVE-2023-20131](https://insights.sbomify.com/CVE-2023-20131/): Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities (medium 6.5)
- [CVE-2023-20130](https://insights.sbomify.com/CVE-2023-20130/): Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities (medium 6.5)
- [CVE-2023-2013](https://insights.sbomify.com/CVE-2023-2013/): Other in GitLab (low 2.6)
- [CVE-2023-20129](https://insights.sbomify.com/CVE-2023-20129/): Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/409/